All Apps and Add-ons

Citrix XenServer Technology Add-on (TA-XS60-Server) hypervisor:xenserver:sr sourcetype not being populated correctly

cpayne_satisnet
New Member

The sourcetype hypervisor:xenserver:sr isn't being populated correctly in one of the environments I need to work in.

In the inputs.conf of the TA, it shows that bin/getSR.py is populating this.

When manually running the script by the following from the app directory, it outputs some of the SR's then silently dies.

/opt/splunkforwarder/bin/splunk cmd /usr/bin/python bin/getSR.py

0 Karma

cpayne_satisnet
New Member

I found this was dying on:-
if(srRecord["shared"] and srRecord["other_config"]["XenCenter.CustomFields.vol_name"]):
out += " vol_name=%s" % (srRecord["other_config"]["XenCenter.CustomFields.vol_name"])

I changed the script to be :-

    # added try/except to stop script failing after a couple of records
    try:
        if(srRecord["shared"] and srRecord["other_config"]["XenCenter.CustomFields.vol_name"]):
            out += " vol_name=%s" % (srRecord["other_config"]["XenCenter.CustomFields.vol_name"])
    except:
        pass
0 Karma
Get Updates on the Splunk Community!

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Watch On Demand the Tech Talk on November 6 at 11AM PT, and empower your SOC to reach new heights! Duration: ...

Splunk Observability as Code: From Zero to Dashboard

For the details on what Self-Service Observability and Observability as Code is, we have some awesome content ...